Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft
File:                     Rfpu6-HepSLAREPPJSnpd5qY2I8.mft (raw, json)
Hash identifier:          p8s1O74X/3cr7GiV069xMPI7DB1Xn4WU0HbznNkrgsg=
Subject key identifier:   B3:44:79:A9:52:1B:A7:9B:30:4C:19:0D:D3:ED:D7:8A:A7:53:99:13
Authority key identifier: 45:FA:6E:EB:E1:DE:A5:22:C0:44:43:CF:25:29:E9:77:9A:98:D8:8F
Certificate issuer:       /CN=A916E343/serialNumber=45FA6EEBE1DEA522C04443CF2529E9779A98D88F
Certificate serial:       0191
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft
Manifest number:          018E
Signing time:             Sun 19 Oct 2025 06:04:34 +0000
Manifest this update:     Sun 19 Oct 2025 06:04:34 +0000
Manifest next update:     Sun 26 Oct 2025 06:04:34 +0000
Files and hashes:         1: Rfpu6-HepSLAREPPJSnpd5qY2I8.crl (hash: DNtNT306IpmwzJSdI0XvhL0Poyw0wb2qYJA6vt4oZfQ=)
                          2: 798F13884BC511EE95462F4FC4F9AE02.roa (hash: AVNsCvyoIWNnSL3EVkTgsABpIGwTqMix3+lKD39yw+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.crl
                          rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E343, serialNumber=45FA6EEBE1DEA522C04443CF2529E9779A98D88F
        Validity
            Not Before: Oct 19 06:04:34 2025 GMT
            Not After : Oct 26 06:04:34 2025 GMT
        Subject: CN=68f47f72-afd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d3:77:e9:9b:5e:cc:5f:a0:79:c9:0f:d2:85:
                    55:fc:fc:d2:fe:3f:08:a5:5e:8a:1a:cb:d2:70:8e:
                    1b:49:d3:fa:a9:f4:3a:d3:de:3b:67:c6:94:3e:88:
                    c1:a0:71:c1:75:8c:18:81:73:ba:a8:c3:e2:e4:59:
                    90:bd:63:d5:fe:e3:46:6b:6d:9c:87:0e:5d:8b:ed:
                    38:69:05:d4:3f:19:62:18:6e:8d:88:78:7f:47:df:
                    1e:ca:ca:0f:cb:43:40:b4:05:82:83:63:1c:1d:84:
                    52:ba:4e:39:cc:13:06:46:53:1d:c4:fa:28:c3:c6:
                    3c:ff:5c:64:b4:6e:3b:64:55:7f:3e:38:bf:be:b0:
                    d0:17:b4:e7:39:01:9c:3a:c4:a4:34:d0:dc:3c:c9:
                    8d:b1:39:bf:03:24:0b:72:5d:c8:85:09:7d:21:aa:
                    79:f5:06:06:d8:8a:aa:a6:5c:fe:a3:10:15:00:51:
                    1b:3a:24:03:84:a8:16:0e:0f:46:0a:a1:2c:8e:e3:
                    1d:a5:f8:2e:25:94:1e:db:27:2a:ef:16:40:f5:02:
                    7f:4e:8e:11:c0:20:7a:5d:33:74:5f:0b:eb:fc:6b:
                    c7:38:38:00:d8:72:78:20:2d:a3:d9:da:12:9f:b3:
                    1d:5d:92:47:f1:a0:fc:54:30:88:f6:9a:99:de:3c:
                    41:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:44:79:A9:52:1B:A7:9B:30:4C:19:0D:D3:ED:D7:8A:A7:53:99:13
            X509v3 Authority Key Identifier:
                keyid:45:FA:6E:EB:E1:DE:A5:22:C0:44:43:CF:25:29:E9:77:9A:98:D8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f8:61:e3:3b:9a:63:a4:d2:1b:b6:5e:fb:94:83:3f:a1:45:c0:
         56:ae:0a:20:97:35:c4:57:49:a3:dd:4e:9f:a5:50:64:c7:9d:
         a9:e1:ff:2e:2a:fc:a5:81:ac:ce:ea:ea:71:84:df:9e:b9:e2:
         69:2b:f0:7f:8b:9e:c2:15:ce:4a:a1:84:90:46:a1:9f:90:26:
         cd:72:b7:09:66:5f:04:5c:4d:05:fa:5c:bf:2e:f8:ff:03:56:
         7e:8f:db:83:b7:2d:8b:c1:1d:92:cf:99:89:7d:e6:de:39:f6:
         d4:cc:dd:89:82:1d:19:e8:7f:0b:e9:8e:54:5d:dc:80:cd:43:
         fe:21:bd:cd:00:45:a3:33:63:1d:10:8d:45:e0:f4:12:c4:c4:
         e3:12:b3:bc:c7:a3:58:8e:4e:2a:76:4a:5c:b0:60:a6:0f:84:
         c4:ba:21:d1:06:9b:8c:d3:df:90:4e:4d:fc:84:fb:5e:c1:a1:
         5c:05:16:67:8c:63:4d:a4:92:d8:01:60:9a:90:b7:8f:36:f6:
         41:50:89:97:37:45:1d:79:31:0a:89:fb:f8:d4:41:82:f6:87:
         c5:d6:52:79:bb:62:cf:df:dc:47:0a:82:d8:73:fb:94:2d:23:
         1b:57:b8:bb:b4:ed:04:2f:12:e1:0d:5e:e7:3d:cc:c6:52:e8:
         3e:c0:c3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:43 2025 by rpki-client